Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: VwPBGcmp0Cc9yI155NJn981+38QcXg/JYA/xCZXl8ek=
Subject key identifier: B6:6B:6C:9F:78:5D:1E:E0:18:D4:07:2C:CD:41:2F:BD:8B:0C:EF:D6
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01A0CAEB552CF67108B07B4598DF5DCB1147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 1391
Signing time: Tue 22 Sep 2026 21:00:15 +0000
Manifest this update: Tue 22 Sep 2026 21:00:15 +0000
Manifest next update: Wed 23 Sep 2026 21:00:15 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: ++JXKX++hpoyrqZYb43J6bXbZoFZvmHtss43BbbLoK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:55:2c:f6:71:08:b0:7b:45:98:df:5d:cb:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Sep 22 21:00:15 2026 GMT
Not After : Sep 23 21:00:15 2026 GMT
Subject: CN=b66b6c9f785d1ee018d4072ccd412fbd8b0cefd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:02:4b:88:9d:06:c7:2c:36:d3:26:6b:59:
6a:e9:77:fc:8d:60:73:19:b1:f6:76:bd:9a:90:3d:
58:49:c3:cc:e3:0b:f3:cb:34:2d:91:37:5f:9c:ec:
fe:11:02:88:f7:f6:a3:2d:df:e8:35:4c:e4:f7:22:
a4:76:01:19:87:f7:2e:c6:5e:77:57:5b:bb:5b:f6:
b9:c9:f5:6d:26:24:d3:81:d8:d8:9e:e7:4c:8b:4b:
3a:df:41:da:ed:a7:1e:ac:b6:d3:44:ae:10:c9:f9:
66:b7:17:e8:bc:95:b6:d0:59:84:6a:cd:8f:9a:e7:
fc:60:f2:fb:02:17:7c:b4:76:51:3b:85:05:f2:8b:
1a:e5:d8:46:7a:30:00:b5:be:9f:6e:45:26:a2:dc:
c6:7f:3b:0b:68:4e:ca:5c:fb:a7:ef:90:39:4b:74:
6a:8e:b1:10:62:3c:73:14:39:65:31:c3:93:9c:c8:
82:dc:74:ba:7e:8a:43:18:0b:5b:6b:5a:a1:5e:bc:
66:e1:f8:32:8f:91:08:29:13:28:c3:bc:78:94:13:
23:ab:24:6a:44:45:7b:c9:f1:a5:a4:68:04:51:01:
a4:b4:f5:6b:ac:3f:32:df:b9:68:79:d4:ce:90:66:
17:f3:70:36:a1:9e:78:38:27:0a:9f:d0:e8:5b:12:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:6C:9F:78:5D:1E:E0:18:D4:07:2C:CD:41:2F:BD:8B:0C:EF:D6
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4e:f4:8f:cf:d6:6a:30:7a:e3:41:ae:cc:28:95:85:01:ba:
2a:ba:f6:cf:d8:49:02:1c:38:c7:75:f9:64:4e:48:8b:c1:f5:
4c:ae:da:8f:d3:05:00:98:a4:f5:3a:68:31:03:df:6c:b8:55:
11:57:87:49:ad:67:5e:c8:82:be:73:c3:c6:a1:71:22:1b:1a:
ef:07:55:64:50:f2:74:ea:5d:2e:50:5c:85:2b:99:5d:73:60:
6e:27:67:b5:2d:c6:af:f8:b0:45:ce:0d:10:a3:bb:b8:75:ad:
7d:e3:34:9f:a3:17:09:7f:05:af:61:7f:90:b9:3d:72:a1:f3:
09:ac:2c:85:c8:fb:64:72:d7:46:fc:b9:b2:02:02:65:66:4b:
05:a1:93:a8:e0:c1:83:9b:e9:84:34:d0:80:7e:43:c9:d0:a3:
63:31:31:19:6a:de:28:14:0d:93:00:61:1b:52:56:4b:5e:1e:
73:73:0e:35:a8:19:ca:8c:a5:b6:eb:75:b4:bd:9a:c2:dd:d0:
cf:f4:45:96:38:61:ca:af:55:e0:33:de:6b:55:d3:22:e8:ba:
75:93:8c:ac:c8:15:1a:c5:22:87:71:0a:bb:c8:39:53:8f:77:
76:e8:8c:38:ac:ea:45:d2:28:d2:62:79:96:42:d8:c0:37:aa:
7a:9e:bd:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK61Us9nEIsHtFmN9dyxFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj
ZTAzOTEwHhcNMjYwOTIyMjEwMDE1WhcNMjYwOTIzMjEwMDE1WjAzMTEwLwYDVQQD
EyhiNjZiNmM5Zjc4NWQxZWUwMThkNDA3MmNjZDQxMmZiZDhiMGNlZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw20CS4idBscsNtMma1lq6Xf8jWBz
GbH2dr2akD1YScPM4wvzyzQtkTdfnOz+EQKI9/ajLd/oNUzk9yKkdgEZh/cuxl53
V1u7W/a5yfVtJiTTgdjYnudMi0s630Ha7acerLbTRK4QyflmtxfovJW20FmEas2P
muf8YPL7Ahd8tHZRO4UF8osa5dhGejAAtb6fbkUmotzGfzsLaE7KXPun75A5S3Rq
jrEQYjxzFDllMcOTnMiC3HS6fopDGAtba1qhXrxm4fgyj5EIKRMow7x4lBMjqyRq
REV7yfGlpGgEUQGktPVrrD8y37loedTOkGYX83A2oZ54OCcKn9DoWxK7awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZrbJ94XR7gGNQHLM1BL72LDO/WMB8GA1UdIwQY
MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt
OWI2NTg5MGUyZWFlLzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl
LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE70j8/W
ajB640GuzCiVhQG6Krr2z9hJAhw4x3X5ZE5Ii8H1TK7aj9MFAJik9TpoMQPfbLhV
EVeHSa1nXsiCvnPDxqFxIhsa7wdVZFDydOpdLlBchSuZXXNgbidntS3Gr/iwRc4N
EKO7uHWtfeM0n6MXCX8Fr2F/kLk9cqHzCawshcj7ZHLXRvy5sgICZWZLBaGTqODB
g5vphDTQgH5DydCjYzExGWreKBQNkwBhG1JWS14ec3MONagZyoyltut1tL2awt3Q
z/RFljhhyq9V4DPea1XTIui6dZOMrMgVGsUih3EKu8g5U493duiMOKzqRdIo0mJ5
lkLYwDeqep69zQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:14:46 2026 by rpki-client